CVE-2022-4417

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 9.3.3 does not properly block access to the REST API users endpoint when the blog is in a subdirectory, which could allow attackers to bypass the restriction in place and list users

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jan 2, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-441719.8Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function form_fast_setting_wifi_set.CVE-2022-441729.8Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function R7WebsSecurityHandler.CVE-2022-441749.8Tenda AC18 V15.03.05.05 is vulnerable to Buffer Overflow via function formSetDeviceName.CVE-2022-441759.8Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetMacFilterCfg.CVE-2022-441769.8Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function fromSetRouteStatic.CVE-2022-441779.8Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formWifiWpsStart.CVE-2022-441789.8Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow. via function formWifiWpsOOB.CVE-2022-44187.8Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Cyber Protect HomCVE-2022-441809.8Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function addWifiMacFilter.CVE-2022-441839.8Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetWifiGuestBasic.CVE-2022-441849.8Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_sec.CVE-2022-441869.8Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_pri.
CVE-2022-4417: Medium severity, CVSS 5.3 | Vulnix